PDF.js Viewer
Healthy: PDF.js Viewer is maintained, has no open risk signals and no unpatched vulnerabilities.
| Ownership | 100 |
|---|---|
| Maintenance | 100 |
| Security | 100 |
| Support | 70 |
| Reputation | 70 |
Active signals
Facts we detected, with links to the source.
No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| abuhayat | 27 Mar 2020 to 27 Mar 2020, 1 commits |
|---|---|
| TwisterMc | 1 Apr 2020 to 26 Oct 2026, 95 commits |
2 committers recorded. No ownership changes recorded since 3 Nov 2026.
Maintenance
- Last release
- 9 days ago
- Releases, 24 months
- 10
- Tested up to
- 7.0 vs 7.1
- Requires PHP
- 7.4 supported 8.2+
| Q1 2024 | 1 |
|---|---|
| Q2 2024 | 1 |
| Q3 2024 | 2 |
| Q4 2024 | 0 |
| Q1 2025 | 0 |
| Q2 2025 | 0 |
| Q3 2025 | 1 |
| Q4 2025 | 3 |
| Q1 2026 | 3 |
| Q2 2026 | 2 |
| Q3 2026 | 0 |
| Q4 2026 | 1 |
Last release 26 Oct 2026. Tested up to 7.0, 1 major version behind WordPress 7.1.
Support
0% of 1 support threads resolved in the last 2 months.
Security record
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 20 May 2024 | PDF.js < 4.2.67 - Arbitrary JavaScript Execution | 6.4 | <= 2.1.8.1 | 2.2 | 21 |
| 10 Jan 2023 | PDF.js Viewer <= 2.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode | 6.4 | <= 2.1.7 | 2.1.8 | 0 |
| 11 Aug 2021 | PDF.js Viewer <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting | 5.4 | < 2.0.2 | 2.0.2 | 76 |
Source: Wordfence Intelligence.
Reputation
| Q2 2024 | 3.3 |
|---|---|
| Q3 2024 | 5.0 |
| Q1 2025 | 5.0 |
| Q3 2025 | 5.0 |
Average rating rose from 3.3 to 5.0 between Q2 2024 and Q3 2025.
| 5 star | 37 |
|---|---|
| 4 star | 7 |
| 3 star | 4 |
| 2 star | 3 |
| 1 star | 2 |
- Not working · 1 star · 29 Jun 2024
Momentum
20,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 751 |
|---|---|
| 11 May 2026 | 1,368 |
| 18 May 2026 | 1,683 |
| 25 May 2026 | 1,078 |
| 1 Jun 2026 | 980 |
| 8 Jun 2026 | 917 |
| 15 Jun 2026 | 811 |
| 22 Jun 2026 | 765 |
| 29 Jun 2026 | 708 |
| 6 Jul 2026 | 722 |
| 13 Jul 2026 | 703 |
| 20 Jul 2026 | 876 |
| 27 Jul 2026 | 787 |
| 3 Aug 2026 | 872 |
| 10 Aug 2026 | 719 |
| 17 Aug 2026 | 766 |
| 24 Aug 2026 | 743 |
| 31 Aug 2026 | 799 |
| 7 Sep 2026 | 708 |
| 14 Sep 2026 | 818 |
| 21 Sep 2026 | 791 |
| 28 Sep 2026 | 883 |
| 5 Oct 2026 | 765 |
| 12 Oct 2026 | 683 |
| 19 Oct 2026 | 1,157 |
| 26 Oct 2026 | 10,807 |
| 2 Nov 2026 | 425 |
Weekly downloads over the last 4 weeks are 167% above the 27-week average.
Healthier alternatives
Same category, higher Canary Score. Never sponsored.
Facts
| Version | 3.2.0 |
|---|---|
| Author | Ben Lawson |
| Added | 1 Nov 2013 |
| Last updated | 26 Oct 2026 |
| Active installs | 20,000+ |
| Requires WordPress | 5.0 |
| Tested up to | 7.0.8 |
| Requires PHP | 7.4 |
| Category | Content Management > Document Management & Downloads |
| Tags | pdf, embed, pdfjs, viewer, mozilla |
Questions
Is PDF.js Viewer still maintained?
PDF.js Viewer was last updated on 26 Oct 2026. Its Canary status is Healthy.
Is PDF.js Viewer safe?
PDF.js Viewer has no open unpatched vulnerabilities on record. 0 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.
Who owns PDF.js Viewer?
The wordpress.org author is Ben Lawson. Recent committers: TwisterMc, abuhayat, FalconerWeb, plugin-master. We have recorded no ownership change.
What can I use instead of PDF.js Viewer?
Plugins in the same category with a higher Canary Score: Shortcoder - Create Shortcodes for Anything, FluentSnippets - High-Performance Code Snippets, Header & Footer Code, Custom CSS & PHP Code Manager.